Vulnerability/
CVE-2026-50411

CVE-2026-50411: Windows Active Directory Federation Services Denial of Service Vulnerability

Published Jul 14, 2026

·

Updated

Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Other sources

Windows Active Directory Federation Services Denial of Service Vulnerability

— Microsoft

Affected Software

118 affected componentsFixes available

Microsoft Windows Server 2025<10.0.26100.33158

10.0.26100.33158

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows 11=24H2

10.0.26100.8875

Microsoft Windows Server 2012 R2<6.3.9600.23291

6.3.9600.23291

Microsoft Windows Server 2016<10.0.14393.9339

10.0.14393.9339

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows Server 2016<10.0.14393.9339

10.0.14393.9339

Microsoft Windows Server 2012<6.2.9200.26226

6.2.9200.26226

Microsoft Windows Server 2012<6.2.9200.26226

6.2.9200.26226

Microsoft Windows 11=26H1

10.0.28000.2525

Microsoft Windows 10=1607

10.0.14393.9339

Microsoft Windows 10=1607

10.0.14393.9339

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows 10=22H2

10.0.19045.7548

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows 10=21H2

10.0.19044.7548

Microsoft Windows Server 2022<10.0.20348.5386

10.0.20348.5386

Microsoft Windows 11=26H1

10.0.28000.2525

Microsoft Windows Server 2019<10.0.17763.9020

10.0.17763.9020

Microsoft Windows Server 2019<10.0.17763.9020

10.0.17763.9020

Microsoft Windows 10=1809

10.0.17763.9020

Microsoft Windows Server 2012 R2<6.3.9600.23291

6.3.9600.23291

Microsoft Windows Server 2025<10.0.26100.33158

10.0.26100.33158

Microsoft Windows 10=1809

10.0.17763.9020

Microsoft .NET Framework=3.5

2.0.50727.8983 & 3.0.30729.8978

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0

Microsoft .NET Framework=3.5

2.0.50727.8983 & 3.0.30729.8978

Microsoft .NET Framework=3.5, =4.8.1

2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0

Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2

4.7.4143.0

Microsoft .NET Framework=4.6.2, =4.7, =4.7.1, =4.7.2

4.7.4143.0

Microsoft .NET Framework=3.5, =4.7.2

2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0

Microsoft .NET Framework=3.5, =4.7.2

2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0

Microsoft .NET Framework=3.5, =4.8

2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0

Microsoft .NET Framework=3.5, =4.8

2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0

Microsoft .NET Framework=3.5, =4.8

2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0

Microsoft .NET Framework=4.8

4.8.4803.0

Microsoft .NET Framework=4.8

4.8.4803.0

Microsoft .NET Framework=4.8

4.8.4803.0

Microsoft .NET Framework=4.8.1

4.8.9340.0

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 11=25H2

10.0.26200.8875

Microsoft Windows 10 1607<10.0.14393.9339

Microsoft Windows 10 1607<10.0.14393.9339

Microsoft Windows 10 1809<10.0.17763.9020

Microsoft Windows 10 1809<10.0.17763.9020

Microsoft Windows 10 21h2<10.0.19044.7548

Microsoft Windows 10 21h2<10.0.19044.7548

Microsoft Windows 10 21h2<10.0.19044.7548

Microsoft Windows 10 22h2<10.0.19045.7548

Microsoft Windows 10 22h2<10.0.19045.7548

Microsoft Windows 10 22h2<10.0.19045.7548

Microsoft Windows 11 24h2<10.0.26100.8875

Microsoft Windows 11 24h2<10.0.26100.8875

Microsoft Windows 11 25h2<10.0.26200.8875

Microsoft Windows 11 25h2<10.0.26200.8875

Microsoft Windows 11 26h1<10.0.28000.2525

Microsoft Windows 11 26h1<10.0.28000.2525

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016<10.0.14393.9339

Microsoft Windows Server 2019<10.0.17763.9020

Microsoft Windows Server 2022<10.0.20348.5386

Microsoft Windows Server 2025<10.0.26100.33158

All of the following

Microsoft .NET Framework=4.8.1

Any of the following

Microsoft Windows 11 26h1

Microsoft Windows 11 26h1

All of the following

Microsoft .NET Framework=4.8

Any of the following

Microsoft Windows 10 1607

Microsoft Windows 10 1607

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

All of the following

Any of the following

Microsoft .NET Framework=4.6.2

Microsoft .NET Framework=4.7

Microsoft .NET Framework=4.7.1

Microsoft .NET Framework=4.7.2

Any of the following

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

All of the following

Any of the following

Microsoft .NET Framework=3.5

Microsoft .NET Framework=4.8.1

Any of the following

Microsoft Windows 10 21h2

Microsoft Windows 10 21h2

Microsoft Windows 10 21h2

Microsoft Windows 10 22h2

Microsoft Windows 10 22h2

Microsoft Windows 10 22h2

Microsoft Windows 11 23h2

Microsoft Windows 11 23h2

Microsoft Windows 11 24h2

Microsoft Windows 11 24h2

Microsoft Windows 11 25h2

Microsoft Windows 11 25h2

Microsoft Windows Server 2022

All of the following

Any of the following

Microsoft .NET Framework=3.5

Microsoft .NET Framework=4.8

Any of the following

Microsoft Windows 10 1809

Microsoft Windows 10 1809

Microsoft Windows 10 21h2

Microsoft Windows 10 21h2

Microsoft Windows 10 21h2

Microsoft Windows 10 22h2

Microsoft Windows 10 22h2

Microsoft Windows 10 22h2

Microsoft Windows Server 2019

Microsoft Windows Server 2022

All of the following

Any of the following

Microsoft .NET Framework=3.5

Microsoft .NET Framework=4.7.2

Any of the following

Microsoft Windows 10 1607

Microsoft Windows 10 1607

Microsoft Windows 10 1809

Microsoft Windows 10 1809

Microsoft Windows Server 2016

Microsoft Windows Server 2019

Remediation

Patch Available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50411

Event History

Jul 14, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Updated

via Microsoft·02:00 PM

Affected Software

Updated

via Microsoft·02:00 PM

Description

CVE Published

via MITRE·05:07 PM

Data Sourced

via MITRE·05:07 PM

DescriptionSeverity

Data Sourced

via NVD·06:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-50411?

The severity of CVE-2026-50411 is rated high with a score of 7.5.

2

How do I fix CVE-2026-50411?

To fix CVE-2026-50411, apply the latest security updates provided by Microsoft for affected software.

3

What systems are affected by CVE-2026-50411?

CVE-2026-50411 affects Microsoft .NET Framework, Windows 10, Windows 11, and several versions of Windows Server.

4

What type of vulnerability is CVE-2026-50411?

CVE-2026-50411 is a stack-based buffer overflow vulnerability in Active Directory Federation Services.

5

What impact does CVE-2026-50411 have?

CVE-2026-50411 could allow an unauthorized attacker to cause a denial of service over a network.

CVSS Score

7.5High

High Severity

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Security Metrics

Risk Score43

Severityhigh(7.5)

CWE

121119

Timeline

PublishedJul 14, 2026

Updated

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50411Advisory

Tags

agent/titleagent/typeagent/referencesagent/risk-scorecollector/msrc-cvesource/Microsoftagent/descriptionagent/weaknessagent/first-publish-dateagent/severityagent/authoragent/sourcecollector/msrcagent/tagscollector/mitre-cvesource/MITREcollector/nvd-apisource/NVDagent/last-modified-dateagent/eventagent/remedyagent/softwarecombinevendor/microsoftcanonical/microsoft windows server 2025canonical/microsoft windows 11version/microsoft windows 11/24h2canonical/microsoft windows server 2012 r2canonical/microsoft windows server 2016canonical/microsoft windows 10version/microsoft windows 10/22h2canonical/microsoft windows server 2012version/microsoft windows 11/26h1version/microsoft windows 10/1607version/microsoft windows 10/21h2canonical/microsoft windows server 2022canonical/microsoft windows server 2019version/microsoft windows 10/1809canonical/microsoft .net frameworkversion/microsoft .net framework/3.5version/microsoft .net framework/4.8.1version/microsoft .net framework/4.6.2version/microsoft .net framework/4.7version/microsoft .net framework/4.7.1version/microsoft .net framework/4.7.2version/microsoft .net framework/4.8version/microsoft windows 11/25h2canonical/microsoft windows 10 1607canonical/microsoft windows 10 1809canonical/microsoft windows 10 21h2canonical/microsoft windows 10 22h2canonical/microsoft windows 11 24h2canonical/microsoft windows 11 25h2canonical/microsoft windows 11 26h1version/microsoft windows server 2012/r2canonical/microsoft windows 11 23h2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203